Do Son Broadcom has released urgent patches for four critical (CVSS up to 9.3) VMware vulnerabilities affecting ESXi, Workstation, and Fusion, allowing host code execution.
vmware
Trend Micro uncovers BERT ransomware (Water Pombero) deploying multi-threaded variants against Windows, Linux, and ESXi systems, showing code similarities to REvil's Linux variant.
Broadcom releases critical patches for three Stored XSS vulnerabilities (CVE-2025-22243, CVE-22244, CVE-22245) in VMware NSX, Cloud Foundation & Telco Cloud. Update immediately!
Broadcom addresses four new vulnerabilities in VMware ESXi, vCenter, Workstation, and Fusion, ranging from command execution to XSS. Update now.
RVTools briefly hijacked in a Bumblebee malware supply chain attack. Learn how attackers used a trusted tool to deliver post-exploitation payloads.
Facing backlash, Broadcom has reversed its 72-core minimum licensing for VMware, reinstating the lower core count. Future licensing changes remain uncertain.
VMware has filed a lawsuit against Siemens for unauthorized use of its software products. Discover the details of the case.
These flaws—CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226—pose serious security risks, with some already being exploited in the wild
Stay protected from exploited VMware vulnerabilities. Learn about the critical risks posed by heap-overflow vulnerabilities on vCenter Server.
Understand the impact of CVE-2024-38812, a high-risk exploit, and how to secure your VMware vCenter Server with the necessary updates.
Stay informed about the high-severity security vulnerability (CVE-2024-38811) affecting VMware Fusion on macOS. Learn about the potential risks and how to protect yourself.
These flaws, tracked as CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, and CVE-2024-22270, expose users to a range of threats
VMware has released critical security patches to address multiple vulnerabilities in its SD-WAN (Software-Defined Wide Area Network) solution
If left unaddressed, threat actors could exploit these flaws (CVE-2024-22245 and CVE-2024-22250) to hijack user sessions and infiltrate sensitive systems
As of January 17, 2024, VMware has reported evidence that the CVE-2023-34048 RCE bug is currently being exploited in attacks
The recent discovery of CVE-2023-34063, a critical vulnerability with a CVSS score of 9.9, allows attackers to gain remote execution.
CVE-2023-34060 and assigned a CVSS score of 9.8, allows malicious actors with network access to bypass login restrictions
the CVE-2023-34039 flaw arises from a lapse in the unique cryptographic key generation in the Aria Operations for Networks
CVE-2023-20887, if exploited, could result in remote code execution—a scenario that spells serious trouble for network security
VMware Workstation and Fusion contain a critical stack-based buffer-overflow CVE-2023-20869 vulnerability (CVSSv3 base score of 9.3
An unauthenticated hacker with network access to VMware Aria Operations for Logs may exploit CVE-2023-20864 to execute arbitrary code as root
With a CVSS score of 9.8 and tracked as CVE-2022-31704, the first of the bugs is a remote code execution vulnerability affecting vRealize Log Insight